Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa
File:                     0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa (raw, json)
Hash identifier:          pL1hCdAFJB1dtSd6741xspgyCO70pkYYXPbe5TBGOsw=
Subject key identifier:   50:73:2D:3F:E1:99:B7:6C:C1:41:A3:04:21:0C:30:4B:13:BF:8D:4A
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584F2957CEAC7695AC44A719B530
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     13445
IP address blocks:        2607:fcf0:1100::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:ce:ac:76:95:ac:44:a7:19:b5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=7f4514d4-1829-4a90-8964-26811ca05869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:34:9c:b6:d6:85:99:77:73:7a:15:08:f6:
                    d7:bb:ee:98:73:3e:bb:ac:18:24:c8:0a:76:d9:90:
                    2d:1d:41:6b:dd:09:d3:b1:36:94:1d:07:e5:11:f5:
                    8c:3a:80:22:df:d2:20:01:79:18:3d:8c:0a:fc:d9:
                    e4:6a:85:63:21:5d:4c:60:da:aa:91:da:1b:bc:7d:
                    8c:04:fd:69:ff:12:15:e5:66:15:83:5f:8d:d3:bf:
                    82:02:7e:d8:9c:9b:dc:8f:8b:a0:2e:c4:10:bd:64:
                    64:71:e3:98:50:2a:38:e6:a1:a7:f7:97:15:3d:7d:
                    b8:2d:dd:e1:a6:b0:d2:e4:b9:ad:5a:ac:ec:69:0d:
                    c2:9e:e6:4c:db:0b:20:6d:1f:14:08:6d:c0:2f:65:
                    10:ba:0d:c1:02:b5:d1:35:c3:65:c5:30:c0:73:25:
                    83:e6:64:9a:a3:c4:d6:b8:4c:ae:97:02:51:57:ec:
                    ce:10:7d:ac:cf:1f:01:eb:f2:d6:d3:ca:d1:88:53:
                    b7:d2:92:05:b5:ce:04:86:4f:ff:8d:42:d6:d8:cd:
                    1c:4e:3c:d4:cf:dd:d4:d0:11:23:1e:d5:c4:83:85:
                    fb:80:f7:36:60:57:41:29:29:c7:2f:3c:47:4b:0b:
                    6b:06:a8:03:0a:c5:8d:be:9b:33:a6:5b:e3:79:31:
                    1e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:73:2D:3F:E1:99:B7:6C:C1:41:A3:04:21:0C:30:4B:13:BF:8D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/0d2fb281-c7cb-31bc-bff2-2332fb4bbe87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:fcf0:1100::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:83:3b:78:a4:fd:0e:ce:e7:6a:d3:69:da:d0:fe:ca:71:b6:
         a6:99:6f:b1:6b:0b:cc:07:ad:22:93:13:37:ac:87:00:13:6e:
         e1:3f:e9:ea:3e:f1:1b:3a:8f:7a:d8:35:e5:b9:f1:22:a8:f8:
         5d:4b:5d:c5:fe:95:b1:77:e5:ce:87:fb:9b:89:80:77:09:63:
         d0:be:fb:86:d1:2e:13:d5:5a:10:fb:22:e4:85:db:93:f7:f6:
         30:be:a9:73:6e:28:bf:14:d5:0b:9c:c4:21:32:1a:8c:03:f7:
         65:4c:6c:f5:51:66:78:0b:3f:ad:7b:93:f6:80:b7:a7:5a:15:
         a0:21:a9:df:bf:03:65:2d:0a:1f:af:27:c7:8a:08:92:ec:d7:
         82:12:df:93:7a:38:52:20:4c:9c:b3:35:60:0e:24:ce:83:bd:
         ce:05:b4:c2:52:10:80:3a:90:4b:49:74:ca:0b:24:20:96:c2:
         07:ad:9d:cb:bf:f0:79:0a:42:a0:16:38:c8:a5:38:2d:57:ec:
         8a:7f:64:39:fa:a3:aa:96:66:0e:af:aa:96:6b:63:4c:aa:dc:
         57:55:2c:82:f9:e1:3e:fa:f6:54:b9:b0:06:67:ce:e6:6b:fe:
         f2:ef:03:65:85:95:9f:8f:8a:1e:e0:ed:0f:73:ac:87:b3:d6:
         0f:ef:34:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:09:39 2026 by rpki-client